Description
wasmtime-wasi in Wasmtime before 36.0.18, 37.0.0 before 48.0.6, and 49.0.0 before 49.0.3 re-appends a trailing slash to rename source paths, causing renameat on macOS and FreeBSD hosts to follow directory symlinks. A guest with sandbox write access can rename a relative symlink such as "up/" to move host directories into its sandbox and read or write them.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
bytecodealliance wasmtime
Default version status: unaffected
0 to < 36.0.18affected36.0.18unaffected37.0.0 to < 48.0.6affected48.0.6unaffected49.0.0 to < 49.0.3affected49.0.3unaffected
pkg:cargo/wasmtime-wasi